securityLevel

Where key id lives, as a KeyProperties.SECURITY_LEVEL_ value: StrongBox, the TEE, or software. Android 11 can't tell StrongBox from the TEE: there, a key in secure hardware is the TEE's. (The constants are API 31's, but compile-time ints: they work on 30.)